Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: amzPsoMUpUhQU3YGK+LO3rDLLibnIWtNGbMAfEKebCk=
Subject key identifier: A6:E8:62:FF:77:31:F1:2E:17:4E:79:BC:14:83:1D:42:FC:F2:07:22
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 01988A32D412E7BAE9E95AEAE36BE4DFCE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 15:00:43 +0000
Manifest this update: Fri 08 Aug 2025 15:00:43 +0000
Manifest next update: Sat 09 Aug 2025 15:00:43 +0000
Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: N0xOJGfT11oZy9iif3Lyf0yrYlo1PYY57v6mGWMDwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:d4:12:e7:ba:e9:e9:5a:ea:e3:6b:e4:df:ce:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Aug 8 15:00:43 2025 GMT
Not After : Aug 9 15:00:43 2025 GMT
Subject: CN=a6e862ff7731f12e174e79bc14831d42fcf20722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:25:a2:4e:21:a6:4f:bf:6a:32:b2:5a:0a:
b0:21:a5:75:a4:03:a1:ae:3a:1d:61:d2:bb:ff:9d:
c1:b4:ac:6e:8c:7e:18:90:e8:00:42:1c:c2:3e:b4:
c7:a8:5d:20:78:5c:2a:e0:eb:e0:eb:de:1e:b7:8f:
69:d5:7d:9f:b0:87:78:53:56:dc:53:b6:e6:00:4a:
b3:91:e0:40:48:5d:a9:ad:5d:c6:87:d1:1f:8d:0c:
d1:2e:32:73:b7:51:f4:45:35:e5:91:95:23:c6:01:
91:61:e4:66:ae:ba:d9:e3:da:f3:a5:a0:c9:2a:d1:
e1:64:ec:ba:61:91:d4:d8:14:31:91:34:fc:f0:c3:
33:5a:57:12:76:8c:54:9f:58:a5:e8:8d:b4:55:bf:
34:16:26:2e:fb:38:3b:57:e2:94:d4:73:b0:c5:70:
13:bd:36:e1:1d:58:aa:77:08:cf:72:a4:0a:87:ea:
fe:85:71:6a:a0:4f:8d:e9:86:4f:40:dc:48:a5:01:
75:b9:c4:c4:73:73:df:d4:dd:41:18:39:7b:08:cb:
c1:e2:17:c4:9a:c3:f1:da:2d:40:11:58:2c:fb:40:
1f:f4:d7:07:18:5e:37:f9:c1:2d:96:ba:26:fb:ef:
ac:9f:0d:9f:d8:b6:76:f7:16:b9:4c:ac:2d:c1:4f:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E8:62:FF:77:31:F1:2E:17:4E:79:BC:14:83:1D:42:FC:F2:07:22
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:56:16:0e:93:7e:1d:46:2a:9f:33:07:fe:1a:d5:a7:bc:d5:
b3:32:ba:eb:fa:c0:79:d6:ad:e9:79:57:e1:f9:53:23:c4:74:
02:c8:39:31:81:d0:f9:37:7d:31:48:da:46:e2:37:3b:75:83:
7a:95:a9:f4:c7:a8:5a:b4:7c:e1:aa:ae:b3:3f:c9:73:e3:3d:
c7:d9:a5:e9:97:e2:36:07:83:d3:7a:3a:38:83:90:57:29:f3:
6f:e5:2a:e3:9b:1f:97:a9:9a:08:f6:49:0d:88:2f:16:f6:45:
b2:f5:95:44:55:1c:aa:85:dd:55:8e:fa:22:1f:a8:4a:30:7a:
9f:9f:26:55:b8:41:0a:df:0e:3c:22:e6:0d:df:c8:9f:f9:dc:
f0:a1:9b:f1:57:21:73:07:70:16:e9:af:f5:4b:a5:9d:69:1c:
50:9c:9d:e0:9d:bb:e1:a8:2b:83:b6:6f:93:92:a4:26:db:d9:
25:80:0d:b9:5c:18:c5:5b:48:97:e7:28:3a:48:44:8d:44:26:
9a:79:6e:b4:80:4f:84:cf:f9:e1:9e:a8:3a:5d:29:53:a3:af:
90:67:b5:02:88:42:8b:e5:51:38:ac:e4:02:fe:20:92:5c:ff:
21:c4:55:d5:0c:be:e4:b4:6d:7b:3c:a7:bc:15:d0:fe:ba:c3:
46:9c:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:39:52 2025 by rpki-client